Cyber Sakhi Logo

CYBER SAKHI

AI-Powered Digital Safety & Emergency Response SystemEvidence integrity · Threat intelligence · 24/7 emergency dispatch — for women, by design.

LOGIN

Are you already a user?

SIGN UP

New user?

Scroll Down
Real Cases. Real Lessons.

Know the Threats. Stay Shielded.

These recent, representative cases from Indian cyber crime cells show how women are targeted online. Learn the patterns. Save the evidence. Report in minutes.

Fake Bank Login Page
PHISHING / IDENTITY THEFT

Fake Bank Login Page

What Happened

A 24-year-old woman in Pune received an SMS claiming her SBI account was frozen. She clicked the link and entered her debit card details, CVV, and OTP on a near-perfect copy of the SBI login page. ₹87,000 was drained from her account within 3 minutes.

🎯 How She Was Targeted

  • Smishing (SMS phishing) with urgent account-freeze scare
  • Spoofed domain: `sbi-online-verification[.]in`
  • Fake SSL padlock + cloned bank branding to appear legitimate
  • Pressure to act within 10 minutes or account be blocked permanently

⚠️ Warning Signs

  • !Unexpected SMS/Email asking to 'verify KYC' immediately
  • !URL slightly misspelled or with hyphens/extra words
  • !Website asks for OTP, CVV, or ATM PIN on a login screen
  • !Sender address is a free email (Gmail/Outlook) not a bank domain

✅ How to Stay Safe

  • Never click links in unsolicited SMS. Open the official app yourself.
  • Check the URL bar: legitimate banks use `*.bank` or their own branded domain
  • Banks NEVER call/SMS asking for OTP, CVV, or PIN
  • Report suspicious SMS to 1930 and screenshot as evidence → save to Evidence Locker
Instagram DM Morphed Photo Threat
BLACKMAIL / SEXTORTION

Instagram DM Morphed Photo Threat

What Happened

A college student in Bengaluru received a DM from a fake profile claiming to have 'edited nude photos' of her from her public Instagram posts. The perpetrator demanded ₹35,000 in Bitcoin within 4 hours or threatened to send the morphed images to all her followers and family members.

🎯 How She Was Targeted

  • Photos scraped from public social media accounts (travel, reels, profile pics)
  • Deepfake/morph software used to fabricate nude images
  • burner account with 0 posts, random stolen username
  • Threat timed to a weekday when family was reachable to amplify panic

⚠️ Warning Signs

  • !New/empty profile messages you with an image you don't recognize
  • !Demands crypto, gift cards, or money transfers (untraceable payment)
  • !Urgent '4 hours' deadlines to trigger emotional decision-making
  • !Perpetrator REFUSES to send full image (only a tiny crop to avoid being traceable)

✅ How to Stay Safe

  • DO NOT PAY. 99% of the time paying leads to more blackmail, not less.
  • Screenshot EVERYTHING immediately → Cyber Sakhi Evidence Locker (SHA-256 hashed)
  • Block the account, change your passwords, turn on 2FA, set profiles to private
  • Call 1930 Cyber Crime Helpline and file a report at cybercrime.gov.in — morphed nude threats are a cognizable offence under IT Act Sec 66E & 67A
  • Tell a trusted person immediately — shame gives blackmailers power
Social Media Profile Hijack
ACCOUNT TAKEOVER

Social Media Profile Hijack

What Happened

A professional in Mumbai lost access to her Instagram, WhatsApp, and Gmail within 1 hour. The attacker used a SIM-swap attack: they impersonated her at a mobile store to get a replacement SIM, then performed password resets on every platform. Her followers were sent fake loan links.

🎯 How She Was Targeted

  • SIM swap: attacker visited retail store with fake ID requesting duplicate SIM
  • All accounts linked to her phone number — SMS 2FA bypassed
  • Email recovery codes changed to attacker email before she noticed
  • Within minutes: her contact list was spammed with 'I need ₹50,000 urgently' scams

⚠️ Warning Signs

  • !Sudden 'No Signal' / network outage on your primary phone for 30+ minutes
  • !Emails about password resets you didn't request
  • !Friends text: 'Did you really message me for money?'
  • !SIM card 'registration failed' message appears on your phone

✅ How to Stay Safe

  • Tell your mobile provider to set a SIM-lock PIN (SMS 121 to request). Require biometric ID for any SIM replacement.
  • Use Authenticator App (TOTP) as 2FA, NOT SMS 2FA. SMS is easily intercepted.
  • Save account recovery codes offline (Google, Apple, Meta)
  • In case of SIM-swap: immediately call your telecom + freeze SIM + log into accounts from a trusted device
Fake Customer Care UPI Scam
FINANCIAL / UPI FRAUD

Fake Customer Care UPI Scam

What Happened

A teacher in Jaipur ordered a ₹3,200 dress from an Instagram boutique. The 'delivery partner' called saying her package was stuck and she needed a '₹1 refund verification' on UPI. They said: 'ENTER ₹1 — it's just a verification — you will NOT be charged.' She entered ₹1 and a pop-up requested UPI PIN. After she entered it: ₹98,400 was debited from her savings account.

🎯 How She Was Targeted

  • Fraudsters scraped order confirmations from social ads / courier data leaks
  • Called exactly when delivery was expected to sound plausible
  • Used a 'Money Request' feature disguised as 'refund', debiting when PIN entered
  • Convinced victim to download AnyDesk/TeamViewer in some variants — full account control

⚠️ Warning Signs

  • !Unknown caller claims to be 'delivery/customer care' and knows your partial order details
  • !Asks you to enter UPI PIN to 'RECEIVE MONEY' — RECEIVING NEVER requires a PIN
  • !Asks to install AnyDesk, TeamViewer, QuickSupport, any remote-access app
  • !Creates urgency: 'package will be returned to warehouse in 5 minutes'

✅ How to Stay Safe

  • GOLDEN RULE: You NEVER enter your UPI PIN to RECEIVE money. Only when YOU are sending.
  • No legitimate delivery/customer service calls for 'refund verification' of ₹1
  • Never install remote-access apps (AnyDesk etc.) for a 'customer care call'
  • If debited — call 1930 IMMEDIATELY (within minutes banks can reverse UPI fraud if reported fast). Save call log to Evidence Locker
24 / 7 Emergency Helplines — India

When in Danger. Dial Immediately.

These are toll-free national numbers. Calls are recorded by law enforcement. Keep Cyber Sakhi Evidence Locker ready with screenshots before you call — case IDs are issued instantly.

🚨 In any cybercrime or harassment incident: Do not delete any message, image, call log, or transaction. Screenshot & archive everything into Cyber Sakhi Evidence Locker (forensic SHA-256 hash + chain of custody). ③ Call 1930 (cyber) or 112 (emergency) within minutes — UPI frauds are reversible if reported in the first hour.